Prevent users from accessing new or create actions on the Users controller