More consistent view and actions to accept/decline join requests

The show view is now considering all possible cases and showing the
appropriate texts/links for each.
Also improved some checks and redirects in the controller that were not
100%.

refs #1310
Proper error when a user has no permission to show a join request

Was trigerring a redirect loop. Not raises a RecordNotFound.

refs #1310