users#show only allows changes to current_user
Merge pull request #33 from SalamanderMike/master

users#show only allows changes to current_user