add test for admin/users
no need for require_admin, as we require that using the permissions model now