update course spec
user can edit cat
user may only update own course