Sponsor membership should now be managed through a POST request

* property DAV: group_member_set can be used for setting (accepted) members, but
* to add a membership request you need a POST request
* to promote or demote users to admin, you need a POST request

Privileges aren't checked yet!