modified routes file to limit resources :users