then inherit them from parent node, if not null.

Permission denied error (403) on payload/token userID mismatch enforced.

creator property write is allowed. 

Passes testSubPath() test in CreateNodeControllerTest now.

for user injection and added test on write privilege by ownership.

Changed separator for group_write property to " " in 
CreateNodeController for consistency with NodeDAO

didn't use new Mock Filter for User injection, will include it later