Dev

change log:
fixed:
- authorize for private card show page. Only Admin, creator, and the card's followers can access the page