fixed dispensing form so that encounter provider and location are not displayed in view or edit mode if current user doesn't have rights to edit those fields