Added authorization before_action in users_controller.rb