Klass API and access policies

Includes the API pull request.

Also includes some extra stuff, like access policies for students, courses and schools and their specs.
The extra checking is pretty cheap. It causes all the tasks to load, but they will have to be loaded at some point anyway before they can be displayed.