I have set up course prerequisites but my students can still access the second course before they have finished the first course?

Sorry - the course prerequisites feature does NOT prevent students from accessing courses. 

It merely prevents the course from being marked as "complete" until the students have completed the required course.

More information about course completion here - https://docs.moodle.org/en/Course_completion_settings