adds more security around users access to other users profiles
Finish user edit, update, index, and destroy actions
functioning the way I want, but tests are failing