Revisited membership/subscription

#11 
Correctly handles subscription length
No longer trusts user for prices
Only available to admins