Closes #523

@allspiritseve I trimmed the controller down a little and added security so that only the prof and admin users can update grade schemes.