add check access to users controller by cancan and fix home#index