added join workspace button if policy allows self joining

The bottom line for me is that plone.protect is designed as a standard way of doing this kind of thing. Ideally we should follow the standard, and the above issues should be raised in the plone issue tracker.