add spec for Api::UsersController#show
remove current_resource_owner from ApplicationController