add auth checks for user list, add user checks for crafter add/edit/delete