Add auth to put /users/:id route