fixed permission problems
only staff users are now allowed to see the link to new challenge and evaluation
also only the staff challenge are allowed to access the evaluation view