buffs out students controller testing for #create with invalid params, and #show