Add current_student

Fixes #315.

If the current user is a student, `current_student` will return
`current_user`. If the current user is a staff member, `current_student`
will find a student matching `params[:student_id]` if it exists. You can
override this by setting `current_student = @student` in any controller.