Fixed update_selected functionality so that the permissions are not checked until inside the action.  Previously updating related records would fail even if the user had permission to update records in the relationship because it called the copy_replace action which is protected by the copy permission.  The copy permission was removed from copy_replace and a new action copy_replace_ui was created with the copy permission.  copy_replace now doesn't itself show up in the UI.
Also fixed some peculiarities in the update form for related records.  It now automaticlly hides autoincrement fields and foreign key fields so that users can't inadvertently remove records from relationshps using this form.
Merge branch 'master' of https://github.com/shannah/xataface