Save RESTfulAPI instance in static var
API Implementation of DataObject level permission checks

API can now also check access permission on a DataObject level via the
can() methods via authority dependency.
FIX API Controller now returns answer properly
Permission tests
FIX always call parent::init
FIX Tests expected/actual values order
Default test config checks only config ACL
FIX how access control gets policy constant
Doc udpate
Fix serializer test config
FIX disable auth for basic api test
Added @config docblocks
Remove unnecessary authPolicy var
Added auth get owner test case