Incorrect use of drupal_access_denied() on line 184

As reported in http://drupal.org/node/122234, calling drupal_access_denied() within a callback results in the page getting double-rendered, which is not desired behavior.

Also, the access check on 183 should be for 'edit value lists', not 'create value lists'.