Move join request accept/deny handling to websocket + webhook

From now on we do almost everything via websocket, it means that server.js
is our authorization point for all operations. Only authorizing the room owner
to create a session is done via Kolab4 API.