Prevent signed in user from create and new actions in UsersController (ex.9.6)