Restrict retiring package in the UI to admins

Fixes https://fedorahosted.org/pkgdb2/ticket/11
Adjust the unit-tests to make sure normal user cannot retire package via the UI

(but admins can)