fixes #1646, #3103 - enable cloning for templates, and add read-only options

Shouldn't clone require the 'create' permission (even though i realize its not doing much but redirecting to new)?