only show manage users link if user has _admin role. #383