Refactoring Venue, Lodgings und Rooms

#385
Because all (most) of our admin controller call it. I thought this is part of our "authorization method"... Obviously it's not necessary anymore with cancancan