fix logic in user show and audit.html.erb