secured user and register controllers to admin only