Update users_controller update action
Add tests that checks if edit and update actions are protected.
Add signed_in_user before filter