Enable data.add_collection permission to control collection creation

With this change, regular users can no longer create collections.  Users will need to be admins or have the `data | collection | Can add collection` permission.