Auth: added parameter to allow only admins to add and remove people from roles

If the `HUBOT_AUTH_ADMIN_ONLY_GROUP_MANAGE` variable is set to 1, only admins are able to manage roles.