updated admin_users controller, not tested