added ability to add users, only admin can do this