Finished authorization in users controller the not-DRY way.