Add users controller and limit User Mgmt to Admin Users, i.e. remove public sign up