Users can change product biblio again.

Also use new security.js methods to hide product edit controls
when user is not logged in. Also check to make sure users have
creds to remove products from profiles.

Fixes Uservoice ticket #1095.