Consolidate JAX-RS provider classes (#277, #278).

Exception handling:
All provider classes throw a WebApplicationException.

Access Control Plugin:
"Permissions" provider class is deleted (it is not needed).

Close ticket 277.
Close ticket 278.