Institutional admins can manage spaces of their institution

Had to include a lot of new abilities to allow institutional admins to do
everything an admin of a space can do.

refs #951