Don't show the API scopes interface to non-superuser yets.

Eventually the plan is to allow limited admins to create further scopes
within their scope, but for now the permissions are only setup to allow
superusers to manage api scopes.
Fix datatables sorting/filtering for admin groups and api scopes.

Also sort the admin groups and api scopes in the other forms.
More sleepy hacks to try to get this capybara test passing on travis