use more specific permissions

For the bulk delete Pathauto currently uses "administer site configuration" to determine whether or not you can configure Pathauto. This seems silly to me since the more appropriate permission is administering url aliases.

On the admin/settings/pathauto pathauto also required "administer site configuration" even though there is a separate "administer pathauto". I plan to fix these now and wanted an issue to track them.