refactor QuizUserController
add security to QuizAdminController