Fix blocking access to some APIs

Summary: Non-controller users cannot change their own config, email aliases and subscriptions.

Test Plan: ./phpunit

Reviewers: #hkccp_developers

Subscribers: mollekopf, #hkccp_developers

Differential Revision: https://git.kolab.org/D4328