What's this PR do?
Fixes the authentication and authorization classes for the Certificates REST APIs
How should this be manually tested?
Create a not active user and try to use the Certificate endpoint
More info about how to use the endpoint are in the description of the original PR that introduced the Certificates REST API #12055