Added security to the monitoring calls - the calls to update a lesson now check that the user either the owner of the lesson or a staff member for the lesson. Lessons return for monitoring include both the ones for the user in the staff group and all lessons created by the user. Otherwise it doesn't return lessons that were created by not yet assigned a class. Added learning design id to the DTO - needed by learning client.
