Backend: list_students, add_student, import_students now bypass tutor_courses check for superadmins, matching the existing pattern in list_assigned_tutors. A superadmin creating a new course was getting 401 when accessing it because no tutor_courses row exists for them. Frontend: courses page passes ?courseId= to students/sessions links; both pages now pre-select the matching course on mount instead of always defaulting to courses[0].