Security foodsaver

Touches #472 (closed)

What does this MR do?

• fixes broken permission checks (by returning false in constructor) for
  • foodsaver xhr
  • geoclean xhr
  • mail xhr

How confident are you it won't break things if deployed?

hm...

Links to related issues

Checklist

• added a test, or explain why one is not needed/possible...
• no unrelated changes
• asked someone for a code review
• joined #foodsharing-beta channel at https://slackin.yunity.org
• added an entry to CHANGELOG.md (description, merge request link, username(s))