authors can edit their own questions and exams!

Whoooops! The can_be_edited_by method wasn't checking if the user is the object's author!