Add authorization code for User#edit and User#update action which tests if user is signed in and also if the user is trying to edit the account of someone else.