system/upgrades and system/restart should not require user authent

remove global authentication verification on /api/system in RoR so that WS /api/system/upgrades and /api/system/restart do not require user to be authenticated