Added challenge grades controller scope adjustment

Also need to consider whether students should have access to the 'show' view as well.  If not, we can change the filter so that it is only 'ensure_staff?' instead of being followed by exceptions.