Fix /promote and /demote checking room auth instead of global auth