added a current_user check in the controller so that a guest can't go get to the url for the outline/exam previews