form edit and destroy, results index and destroy security improved

It is only possible to access the forms and results
that can be found through the logged in users associations.