finish user authentication and authorization: user edit, update, index and destroy actions.