ajax attendance form - buggy
update core + modules
restricted access to course files