Added security checks to Feeds.findFeeds() and now inflating JSON fields as appropriate

The generated query in Feeds.findFeeds() is restricted so that users will only be able to get lists of feeds which are public and/or they own.  Also stripping out the apiKey field (if requested) for feeds which the user doesn't own.