Use current_user_id
Validate user_id for student