fixed auth for students#attending