fix permission 'users_manage'
fix redirect and create permission 'users_private_info'
Merge pull request #139 from dupon21/master

permissions fixes