update routes for user#show