fix routes in user.rb and user access to surveys