NABat MultiUser Fixes

[BryonLewis]

• Path/Update Endpoints weren't being passed the proper recordingPK (clientside it's recordingId) that is the internal DB identifier for the recording when checking the apiToken.
• /spectrogram path still had a user_authenticated check outside of the auth_admin interface causing an issue with regular users trying to acces an uncompressed spectrogram.
• Users in NABat are only allowed to add and select one annotation (their own)
• If a user already has an annotation it will automatically select it
• In NABat mode the user can only select annotations associated with their userId/Email address, others are disabled
• Admins can see all annotations in the system.