REST users cannot create/add UnixCluster objects

Probably the isAuthorized() method needs permission for the add action, but it should only be allowed for REST API users. When the UI is used the code that creates the Cluster object does the add and so add on the UnixCluster is not directly called.