added some tests for course-section permissions on the API