Neater implementation of membership change auth checks, ensuring we can't...

Neater implementation of membership change auth checks, ensuring we can't forget to check if the calling user is a member of the room