WL-3453 Drop the isSuperUser() checks.

These aren’t needed because the security service will eventually check to see if the user is an administrator.

These checks were a problem for us because sometimes we will fail a permission check for the administrator if a second factor is required and the current user doesn’t have that second factor.
WL-3453 Add a test for admin not being able to get content.
Merge pull request #35 from ox-it/WL-3453

WL-3453 Don't allow sysadmin to bypass security checks.
WL-3453 Fix for changing behaviour of removeResource().

If you are an admin and you attempt to remove a resource that doesn’t
exist you should get a IdUnusedException rather than a PermissionException.
I’ve updated the editResourceForDelete so that it does the existence check first and I’ve also updated the allowRemove
Merge pull request #47 from ox-it/WL-3453

WL-3453 Don't allow sysadmin to bypass security checks.