Merge pull request #388 from mfrederickson/master

prevent non-admins who are logged in from adding other users