Transfer ownership end point

closes #3426
- added transfer ownership endpoint
- added owner to roles.permissible
- manually removed owner from roles.browse
- removed hard coded author role
- added testUtils.setup(‚roles‘)
- updated transfer ownership tests