examEditService security + exam service bug fix

- every POST request to the service is authenticated to check that user
sending the request is authorized to do so

- fixed bug with exam security (allowing prof to preview exam)