adds tests and logic for preventing new users from creating new users