Restrict membership access changing

Membership PUTs are now restricted to the group administrator for
approvals, and to the user invited for invites.
Merge pull request #126 from cmcnamara87/secure-groups

Restrict membership access changing