added filter so admin can only view all users