Feature/api queries stars

This allows users to star/unstar public queries even if they do not have the :manage_public_queries permission but only the :save_queries permission.