user edit, update, index and destroy with authentication