SHA bookkeepping

Now we capture the most recent commit SHA when GETting a study, and
provide this as query-string var 'starting_commit_SHA' when PUTting it
back to the repository.

NOTE that this pull request should be accepted in tandem with a corresponding
pull request in OpenTreeOfLife/api.opentreeoflife.org#64