add spec for user creation
add admin scope to user controller
skip confirm email for manual user add