Refactor Authorization

move the database logic out of the service, especially the CommentService should be refactored. An Idea is to load RoomAccesses on the SecurityContextRepository into the AuthorizedUser.