Added authorization to submission view on student side.
Added authorizations to student controller.
Merge remote-tracking branch 'upstream/master'