Add $phpcid, and fix permission condition

Method can_admin() should be used if user is !is_admin() but owns the Admin permission of current calendar.