Klass API and access policies

Includes the API pull request.

Also includes some extra stuff, like access policies for students, courses and schools and their specs.
I do agree that sometimes (e.g. general task searching), we'll need to verify that each task can be read, one by one.