Should look into moving user share functionality into separate module

[taylortom]

So can be removed for the security conscious (as it requires access to the list of user records), and also in the fairly likely case that we want to change the feature later.

Would require amending the course.schema.json file