REST: /_all_dbs should be admin-only

Fixes #190