Added check for @post schedule endpoint. Only works if session user = username in url or user
is admin. Added courses key:value definition to schema to allow for empty list, or list
with items.