Merge changes I3bbfc470,I628c4c99

* changes:
  Prevent injecting IdentifiedUser for project REST endpoints
  Refactor UiAction specific code out of change specific code