[#1707] Check that resource belongs to dataset on resource_read

Otherwise you can display resources from other datasets.

Refactored to just call package_show and not resource_show as well
Merge branch '1707-404-resource-2'