Fixed security when adding new sections

Courseid now available as a session