sections field on course API should be a read-only list of sections
initial work on the CourseSection API endpoint