don't allow admins to edit user's passwords
separate active and inactive users on the users page