add authentication that checks for the right user
modify edit and create methods in users_controller, tests not passing.