authorization for api call to system/info is not checked

• Issue Type: Bug
• Rundeck version: 1.4.2

Issue:

Making the api request for system info at /api/1/system/info does not properly check the authorization required. The authorization should require this aclpolicy declaration in the application context:

 resource:
    - equals:
        kind: system
      allow: [read] # allow read of system info

Reproduce:

Remove the authorization listed above for a user or api_token_group.

Request the /api/1/system/info endpoint.

The result is the system info data, which should not be allowed.