added return path
added filter and only allowd edit user self
Merge pull request #44 from hlee/master

only allowed to edit and destroy self user