added before_filter with session[:user_id] to users#show users#edit