Room API Authorization

[aeksco]

See snippet below for details:

// TODO - change `:location` to `:id`
router.get('/:location', controller.show); //gets single room based on location

// TODO - needs auth.hasRole('admin')
router.post('/id', controller.create); //creates a room if user is a mentor

// TODO - needs auth.hasRole('admin')
router.put('/id', controller.update); // updates room info if user is a mentor

// TODO - needs auth.hasRole('admin')
router.delete('/id', controller.destroy); // delete a room from db if user is a mentor

[aeksco]

Make changes in observatory-server/server/api/room/index.js