added authentication to users controllers actions