Scope default course by user's courses

If a user gets removed from their default course, they should not still
have access to that course. /cc @chcholman