fix(howamidoing): use current course for secret validation

[chrononyan]

Disclaimer: untested and based on guesswork, not really familiar with the auth system

[pusherbot]

All PR builds shut down.