Enforce participant role and support membership endpoints with filters

Also refactor membership view to only use roles from the auth service as all access is stored there now.
Add flag to allow decision between needing membership and old behaviour.

Depends on arsnova-auth-service!29 (merged)
Closes #18 (closed), #16 (closed)