XNAT-4346 XNAT-4330 Changed AbstractXnatRestApi to AbstractXapiRestController. Fixed logic in permissions check that broke certain saved searches.