allow adding patients if user level 4