make generate_access_token private, and only create/validate it on create
display the user's sca name as well
enable instructor searching