mattdrayer/api-moderator-role-valiation: Confirm add/remove of role

@chrisndodge, additional validation around the forum moderator role
@chrisndodge, here's the specific new work to get around the funky auth checks, etc., going on in the LMS logic