change authorization for index to :read, {model} for #384
Merge pull request #389 from mfrederickson/master

change index auth! :read for plugins and kinds to check against model class #384