Show test case number on Submissions#index.

Fixes #4.
Security fix: Prevent unauthrized user from viewing contest problems.

I made a mistake that allows any user participated in any contest to
view __any__ contest problem. The correct behavior is to allow only
users participated in contests that use that contest problem.