Fixes and doc for default FB permissions

Goal:

- Form Builder is usable out of the box even without setting Form Builder permissions
- Form Runner Home page does not inadvertently provide access to administrative functions