modify user#show

* require login session
 * redirect to login page if user does not logging in
 * add spec
* fix wrong link_to tag
* remove user#index
fix update form

* add form elements
* permit and sanitize parameters
specify redirect path after edit profile