added nav links based on session, authorize action in UsersController, corrected typos