fix array serialization
fix missing auth on /eleves