Update to EperiencePointsController

updated employee authentication to skip the show action