added security to user show page