Minor cleanups to unbreak tests.

* Removed reverse relation from CourseEnrollment to User.
* Moved submissions app dependency to 0.0.8 (this version doesn't
 fix djangorestframework at 2.3.5, but just specifies < 2.4).