Klass API and access policies

Includes the API pull request.

Also includes some extra stuff, like access policies for students, courses and schools and their specs.
I vote for always passing around Tasks (instead of Reading etc). Makes it a lot easier to manage.