fixed users controller spec to reflect that users can see other users show pages