cp: change to SP that populates branch picklists

- if ct param is passed in then only return branches with customers of
the type passed in, otherwise return all branches the user has access to
cp: add Rights From DataLayer to _Settings security
cp: put security on the dashboard tabs

- only show if user has access to customer of the tab customer type