Implement access request to project & group API

Following !3798 (merged), we need to support this through the API as well. /cc @DouweM