Extend preview to support cohorted courseware

This is a version of #6140, on top of Jim's access control PR.
I didn't introduce this handler so I can't explain why it is here. However, it doesn't seem that we are consistent about having all views living in views.py. Look at item.py, course.py etc.