Card #226 join request @UserOnly and @RoleOnly service security, test fixes