Adds auth for vocabulary_list and vocabulary_show.

Adds auth for vocabulary_list and vocabulary_show as they were currently missing and causing problems in both the coding_standard tests and when overriden in an extension.

Fixes #2104, with other relevant detail at #2128