fixed an issue where a logged in member could create a new user. I still need to make it work for cancan