allow showing the users list for everone

the actual content will be limited to whatever the user is allow to see, at the least their own account, to be able to reach the edit page (to change their password, for example)