admin: refactor tabs

hide tabs when only 1 tab
use 1 tab for Add ACL
document tabs_enabled, remove unused config