add users and grant privs