add authentication on all methods of /eleve/:id
fix some /document/:id methods, and /document/:id.pdf
fix promo methods