fixed user#edit view, fixed users_controller; correct users can destroy own stuff