wrap attribute values in ""
use cancan authorization instead of is_lecturer?. update in trainings controller/view.
admin can see submissions.
remove a bunch of get_unseen_* stuff from user_course
change the rest of the authorization code to use cancan.