must be Owner or Admin to update or destroy memberships. Views reflect functionality
Owners and Admins can visit index, and create memberships
specs for Admin and Owner on destroy and update pending