since we have an ensure_staff? method, I added a ensure_student? method so that some actions will only work for students (like predict_score)