RetrieveAllowedMetaData does not require the user to have a verified email

With !1490 (merged), the permissions system has been rewritten to remove all the @expectedFailure decorators on unit tests that are failing for safe queries (OPTIONS/HEAD/GET) for unverified emails. This should not affect any test that does a POST, PUT, PATCH, DELETE or BREW.

The unit test that checks that RetrieveAllowedMetaData requires a verified email has an @expectedFailure, but even after using this refactored permissions system, the unit test is still failing.