Add authorization => requiring signed-in users
add correct user
Finish user edit, update , index and destroy actions