TASK: Clean up permissions checking with Role Names vs. Role IDs

[johnhenley]

There are a number of places in the module where permissions are checked, and sometimes use Role names vs IDs. Since these are both represented as string arrays internally, the conversion is not inherently obvious, leading to subtle bugs, and should be standardized across the module to always use one convention. Particularly in web api controllers security which inherits from DnnApiController, UserInfo.Roles returns NAMES, and needs to be converted to IDs to be passed to Forums PermissionController(). Review all and figure out a standard.