Configure access for Helium in multi-user enviroment

By default, all users have access to Helium page and can enable/disable any package.
The next configuration is shiro.ini allows user to work with Helium packages bun doesn't allow to disable/enable packages.
Small detail: user could change the order of packages due to "/api/helium/order/visualization".

/api/helium/enabledPackage = authc
/api/helium/order/visualization = authc
/api/helium/spell/config/** = authc
/api/helium/bundle/load/** = authc
/api/helium/** = authc, roles[admin]