Permission fix for imaging browser

Fix part of the bug (6392) reported in redmine: 
"Permissions not working properly. They should match Imaging Browser front page. Instead, anyone can see any page (This will be important when Imaging data is linked directly from a BVL-side timepoint page."
"hass" should have one "s"