Users can view all users and bug fixes

* bugs
* new users location was not being saved
* local controller methode name was wrong
```
params.require(:user).permit(
  :username,
  :email
)
```