fix studentId to userId, all role have id session

Change all session attribute studentId to userId, every role now has a session attribute called userId which contains their user's id.