added route for sign-in
added restriction on users show pages based on current_user.id