Lesson rendering and password checking bug fix

* fixes issue where lesson bodies are undefined (due to api reorg)
* fixes a bug testing for password existing introduced in my over-zealous code reviewing.