Fix json decoder for decode of ReferenceList
Implement rights as angular service.

* sessionService now has method hasRight and constant (functions) for realm, domain, and operation.
* implemented rights for projects page.