Added intercept-url /users, added role checking

added role checking in user edit method