changed users show in users_controller so that non-users cannot view /us...

...ers/id pages