check ownership, handle exceptions in controllers
createStudyController plus duplicate shortname check plus test
check uniqueness of study shortname within dataset