add students views, middleware, auth