Extract accept/unaccept into methods on Question, add auth req

This extracts the question part of accepting/unaccepting into the question
model, and fixes a todo by requiring the question asker makes the request to
accept.