implement user authentication to show,update, and destroy