Show single user on /users

At URL /users, a single user is shown to most users.

All users are shown to admin users.

`rspec spec/models/ability_spec.rb` passes.