API: Added check for access_level derived from token
     Added basic GET calls for courses