fixed user authentication with show/index pages for users and accounts