Administrator registration via client-controlled privilege level

Improper privilege management in Soarkey StudentManagement allows remote attackers to register administrator accounts through registration. RegisterServlet.doPost accepts the client-supplied level field from register.html and stores it as the new account's privilege level without restricting self-registration to a nonadministrative role. No existing account is required; submitting an administrator level creates a new account with administrative access.