Add before_filter on user#show to redirect if not profile owner

Update users_controller spec #show test for authorization
Add feature test for user trying to see profile they are not authoried to view