[FIX] /web/binary/{image,saveas}: use request.registry instead of deprecated...

[FIX] /web/binary/{image,saveas}: use request.registry instead of deprecated `request.session.model`

This makes the controllers work also for
public users, e.g. in the frontend.