update users_controller with new before filter correct_user