remove ability for world to see /users
Merge pull request #64 from akshatpradhan/admin

remove ability for anybody to see /users