middleware.auth roles don't work

[Splaktar]

For example the tag update endpoint says that it requires admin role, but even when I'm not logged in and all cookies/cache is cleared, I can still modify the tag.

  app.route('put', '/tags/:tagId', {
      summary: 'Updates a single tag, requires admin role'
    },
    middleware.auth({roles: ['admin']})

This needs to be resolved before we can add more functionality to the Hub in regards to editing anything (chapters, events, tags, etc).

This is related to PR #53.

[Splaktar]

It might be possible to solve this by using Cloud Endpoints (#99) with Firebase Auth instead of middleware.auth.