Fix/experimental api missing authorizations

https://www.openproject.org/work_packages/15710
Why is star and unstar left on the queries controller although the controller itself no longer eixsts?