Schedule model, API endpoints with permissions

True, I had incorrectly recalled what PEP8 says. I'll add a commit which only changes names.