adds cohorts/detail/<id>, cohort/list (with permissions enforced), and metrics/list endpoints

Change-Id: I429f1086428b029ccbc794d9ad5931b30a244a1f