updated users show view with partials and authorization