move blacklight configuration editing onto a BlacklightConfigurationsController, with appropriate access restrictions applied. fixes #128