Resolve "Decouple student rights from student role"

Also added an option to delete course participations for staff members and external users. Deleting student enrolments can be done only from the database/Rails console; administrators cannot do this via the UI.

Closes #499 (closed)

Closes #545 (closed)