(#143) Add IsPostOrSuperuserOnly permission.

This adds a permission class for cases in which an anonymous user
can create an object, but only superusers can view the list of
objects, e.g. School and User.

This should only ever be used on subclasses of ListCreateAPIView.