Refactor auth system

[petterroea]

Basically, we introduce prepending event type uuid to roles, allowing us to scope roles inside specific event types. This allows some form of multi tenancy.

• PositionMapping should be able to be connected to an eventType.
• If PositionMapping is connected to an eventType, the event type UUID should be prepended to all roles added to the JWT token role list that aren't system roles, except the member role). See https://github.com/phoenixlan/phoenixapi-v1/blob/master/phoenixRest/views/user/oauth.py#L45
• Refactor all ACL to accept this new system where every role can be prepended with event type id, where relevant. Basically, for every instance view handler, if the object in question is connected to an event, fetch the related event type through that event and then allow both the role by itself and the role prepended by the correct event type