change can_start policy, if a student has ever started, let him start
refine code
Merge pull request #249 from wangqiang1208/features/mission-attempt-auth

if a student has ever started, let him start