users to seeds
toggle_status authorization test
permission denied rescue redirects to user show