webapp: if changing admin, allow only changing oauth or spreadsheet, not both

[Christian Jones]

it doesn't work anyway, need to make sure user can tell