added hydra accessControls permissions to files that have modelMixins
fixed spec for catalog controller