Rights check on RetrieveAllowedMetaData
Closes #1090 (closed)
RetrieveAllowedMetaData now has the exact same permission checks as ListCorpusAllowedMetaDatas: allowed to anyone on public corpora, and requires a guest role otherwise. It used to require a verified user, and an admin role due to an incorrect HTTP method check.