Implement access control for getUserById endpoint

[JHalvor]

• Access to endpoint if logged-in user is owner or has teacher role
• Else respond with '403 Forbidden - You do not have access etc..'

Steps

1. Update middleware auth.js with function to check if teacher or owner
2. Update routes to use new middleware function
3. (Update controller, openapi.yml if necessary)