Anonymizing the /api/user/courses api