Cache user course privileges during OpenID Connect authorization.

Good catch, it ends up making 2 calls. Fixed.