Add authentication filters to the users controller.

Add new authentication filter for admins or same user.
Move existing before_filter lines to more appropriate locations.