LPS-48797 Create ADD_DEVICE permission in resource-actions
LPS-48797 Check ADD_DEVICE permission. Use @AccessControlled annotation to allow guests to call JSONWS for adding devices anonymously.
LPS-48797 build-service
LPS-48797 getUserId() works fine when @AccessControlled is added to the method, but I'm not sure if the same is true when it's called from a portlet or JSP. Making it safer by changing to getGuestOrUserId() to avoid PrincipalExceptions