security checks on Student controller, html formatting, css tweaks, ajax error messaging