Added permission checking to auth webservice

Note: not login webservice
Added permission checking for closing auth sessions based on PERMISSIONS.md
Need to add permission checking for returning auth sessions via XML
Added permission checking for auth webservice view

Added permission check for each item added to XML response as per PERMISSIONS.md
Fixed HTTP headers not being sent with sendResponse()
Permission dev

Documented more permissions in PERMISSIONS.md
Added basic code to permission checking methods
Added method to close all open AuthSessions and remove from DataStore
Added system config permission checks

Added set and delete permission checks