add authorization
Finish user edit, update, index, and destroy actions