MA-184 Prevent student access to unreleased data through mobile API

https://openedx.atlassian.net/browse/MA-184

@gwprice @aleffert Please review.
nice catch.  thanks.