Add convenience nonapi method User::isAdmin
Test studies w/out I2b2Secure are public
Throw upon finding I2b2Secures w/ empty tokens
Implement User.accessibleStudies (private)