more security checks

- student shouldnt be able to access examedit, itemedit, and itemsearch
now
- prof cant access those pages without going through a course page
first to set the course session var (cant login, and edit url to go to
itemsearch page)