Security issue fixed with UsersController

- users could view other user profiles

- users could view other user profiles through edit user