add authenticate_user! filter in user controller, fixed get /users exception
test login in & user show action