Release grades and assign sessions over the API

Two endpoints to round out the results flow:

• POST /exams/{id}/sessions/release-grades publishes grades and feedback to students, once you're happy with the marking
• PUT /exams/{id}/sessions/{sessionId}/user attaches a session to a user account — handy for scanned paper results that came in without one