Finish user edit and update actions
add authorization for user page