enrollment tests and cleanup

Many, many, many tests. Pep8 cleanup, some additional validation. Includes separation of data.py from api.py, to allow testing the API independently of the data layer. 

@wedaly @dianakhuang @rlucioni 
You can also do `assertIn` for a slightly more descriptive error message.