Resolve "Validate institution and resource codes in catalog controller routes"

Related to #368 (closed)

---

Validate inst code

Baseline page: logged in and displaying databases

https://www.galileo.usg.edu/shen/databases/middle

Bug before validation of inst code

https://www.galileo.usg.edu/BANANA/databases/middle

AND

https://www.galileo.usg.edu/xxxx/databases/middle

Bug fix (validate inst code)

https://localhost:3001/BANANA/databases/middle

AND

http://localhost:3001/xxxx/databases/middle

Incidentally, we allow this (seeing another institution's databases)

https://www.galileo.usg.edu/uga1/databases/middle

(Note: we're showing UGA's middle school resources--probably not that useful, but we allow it.)

---

Validate resource code (:id)

Baseline page: logged in and displaying a resource

https://www.galileo.usg.edu/shen/database/aabi-uga1/middle

Bug before validation of resource code

https://www.galileo.usg.edu/shen/database/BANANA/middle

AND

https://www.galileo.usg.edu/shen/database/aabi-xxxx/middle

Bug fix (validate resource code)

http://localhost:3001/shen/database/BANANA/middle

AND

http://localhost:3001/shen/database/xxxx-shen/middle