auth filter in users#index removed