Admin should be able to see/edit/delete all

closes #282

Admin already can see/edit/delete all directly in the database, but it's not very handy for instance administrators. This makes it possible for admin to see/edit/delete all collections/items/upload_sets via the APIs.