Batch progress, activity heatmap, POST-only actions and evaluation bookings

Batch student progress is now limited to site administrators, Moderators, and the batch's tagged instructors or evaluators. Holding the Batch Evaluator role alone no longer exposes other batches' students.