generalServices security complete

- checks that ccid is set for all requests
- checks that user is prof of course for hte exam for requests related
to exam authoring