added some more permissions tests
student list and detail views and tests