Got rid of authorization for show user API endpoint