add autherize in user_controller #29
add redirect_back_or method