User restrictions

Currently there is a security hole where someone could set their email to mine and become an admin, but once we put in email confirmation that should be resolved