removed duplicate role definition
update controller calls to user roles to include course
adding scopes to users, courses, and course_membership