Fix unauthenticated update_coursecode controller

[k3mystra]

• Add update_coursecode to the before_action function to automatically set the course variable
• Add authorize function in update_coursecode, with same level of privilege needed as update
• Add integration test for update_coursecode