Fix transferring of webapi decorator information.
The recent code to transfer webapi decorator information across

decorators and to intelligently merge them had a couple issues. The

@webapi_permission_required decorator was overwriting data, causing the

errors it sets to go away, and the code to merge checked some state too

late.

Unit tests passed.