Using a before_action filter to prevent users from modifying other users