in app/controllers/users_controller.rb [74:78]
def correct_user @user = User.find(params[:id]) redirect_to(root_url) unless current_user?(@user) end