restrict user page view when a guest;
only admin can edit user type for user;
display edit form only if logged in;
only admin can add a user, registering also adds a user;