hide "add guardian" button on insufficient permision

This is not a security issue because the linked view uses the proper permission check and the URL alone does not leak any sensitive data.