Add more auth on get '/users/:id', reword authorize blocks