added authorization to the user controller
added user_signed_in? method to authenticable concern