adding permissions check to user index show link
scoping users controller to limit to accessible by current_user
conditionally prevented update of user email address