Update permissions for drafts, use upstream OAI metadata implementations

Update the permissions for creating/editing drafts, and use the OAI metadata implementations from upstream (because they're more likely to receive future patches than our custom one, which the upstream implementation is based on anyway).