types controller is admin only now

https://www.openproject.org/work_packages/16266

It seems that the pagination in the timelines in now done via api/v2. So the necessity for allowing non admin access no longer exists.
Prefer single-quoted strings when you don't need string interpolation or special symbols.