limits users#show and users#update to the current authenticated user