Added authentication classes

- To ensure that the request is from an authenticated user
- To ensure that the user has access to all course
- content (GlobalStaff, OrgInstructorRole, or OrgStaffRole)