users view for user and admin with cancancan