Always return 409 on `POST /:sources/:id/members` when member already exist

Currently, for backward-compatibility reasons we return 201 for POST /projects/:id/members when the member already exists, while we return 409 for POST /groups/:id/members when the member already exists.

We should change that to always return 409 in both cases.