Fix bug where non-admins could add employees.