Clean up user#show permissions. Hide lots of private stuff.

Added auth checks for all the private things on a user#show page like memberships, screens, and content.
Also removed child content, closing #332.