supress admin toolbox when user cannot do anything

Also ties deprecated and rewriteTokens tabs to ADMIN_RIGHTS