refactor auth tests
add user authorization and editing
add user index and pagination
add admin bool to user model, add destroy action to user controller