SONAR-5010 refactor WebService#isApi() to isPrivate()

Do not use naming convention on controller path. It prevents from mixing public and private actions on the same controller.