MarionL - added member create/delete service

Added create, read, delete service for members to the project.  The rest
tier only exposes create/delete as it should never need to "get" a
member. Also added authorization for member, such that only project
leader can add/remove members.