If the course is not accessible to the user, we should return 404.