Metacat

In setReplicationStatus(), first check for a replica target MN subject match with the session subject. If this fails, look to see if CN admin access is allowed. Otherwise throw NotAuthorized. Addresses https://redmine.dataone.org/issues/2494

do not allow "Metacat-conforming" identifiers to be used. "test.1.001" is interpreted as "test.1.1" which renders "test.1.002" unusable unless a traditional Metacat "update" is used for that id/revision which contradicts the DataONE use of Identifiers that have no lexical requirements for revisions.

check for session when checking administrative authorization

Remove individual calls to isAdminAuthorized() in favor of the centralized isAuthorized() call that handles it now.

Incorporate isAdminAuthorized() into isAuthorized() for blanket CN access to objects.

check for null Session before continuing with setReplicationStatus()
https://redmine.dataone.org/issues/2476#note-3

do not attempt to parse empty file for the failure (BaseException serialization). There are cases when this is not given (failure="") when there is not a failure.
https://redmine.dataone.org/issues/2476

check for null session (public) calls to MN.replicate() before passing it to the asynchronous implementation

do not replicate if session is null

throw not authorized when attempting to getReplica as an invalid/non-existent node