Check study access rights and study exists

 Fix #445
We should use the properties we already have set up for this.  Just call ```user.private_studies```, ```user.shared_studies```, and ```study.get_public```