Rely on middleware for exam session checks