modified CollectionServiceAPI and ProductAPI to use the authentication mechanisms in the AuthenticationServiceAPI, also refectored a bit of the PermissionType enum