user edit, update, delete, index, destroy, admin
logged in users can't go to users/new