collect_data modification in exams/views

return 403 on submissions whose attempt number is > than the max
allowed by exam.  previously this check was only on rendering the
exam page.

@sefk or @jrbl