Updated routes, allergy/user controllers

I implemented the new Rails 4 private params feature to allow my nested
allergy resource to be accessed from the user model, and added link_to
tags in the views for navigation.