Fix encounter location to provide facility data

Fix encounter location to provide facility data

The facility data was being excluded in a patient bound context.  If the
access token is bound to a patient context it will return the patient
location data when requesting a specific facility location id.  This was
due to the OR clause in the patient bound search.

Fixed up the search query binding so patient's get their own data or
the facility data but it still prevents access to other patient data.