bugfixes and UI improvements for manage catkey and refresh descMetadata; dependency upgrades

• do not show manage catkey button for apos (#956)
• refactor ItemsController#refresh_metadata to rely on after_action for saving updated object (#960)
• enforce permission and state checking on ItemsController#refresh_metadata (#960)
• prevent invocation of ItemsController#refresh_metadata on objects without a catkey (#960)
• better UI for refresh descMetadata blue button (redirect back to obj detail page w/ better success message, instead of landing on plaintext page w/ cryptic success message) (#960)
• update dependencies (#961)