Strip out unnecessary authorization for UsersController#edit