API Require ADMIN for ?showtemplate=1 (3.0)

See https://github.com/silverstripe/sapphire/pull/1181 for context