SYN-154: Tweak how the m.room.create check is done.

Don't perform the check in auth.is_host_in_room but instead do it in _do_join
and also assert that there are no m.room.members in the room before doing so.