when i click canceled butten then user can login why?

Question

public function approved($id)
{
    $users = User::find($id);    
    $users->status = 'approved';
    $users->save();
    return redirect()->back()->with('status','status is approved');
}
public function canceled($id)
{
    $users = User::find($id);
    $users->status='canceled';
    $users->save();
    return redirect()->back()->with('status','status is canceled');
}

Route::get('/approved/{id}', [App\Http\Controllers\HomeController::class, 'approved']); Route::get('/canceled/{id}', [App\Http\Controllers\HomeController::class, 'canceled']);