Cache user course privileges during OpenID Connect authorization.

This should be in a setting.