Cancel job through endpoint instead of doc method

Cancel Job button now works for dashboard users; the endpoint bypasses doc-level permission checks.