added school field to all other models, factored out authenticated permission from api views
fixed tests that were broken after model changes
refactored LocationList view to use GET kwargs instead of URL kwargs
refactored rest of Location views, now need to override save method on Location form so that it gets associated with the school
refactored Course views and location and course forms
refactored views and URLs again, fixed list view results
moved api into separate app folder to split out the views
fixed location create