client does not receive any privileged information
added moment, date joined to user schema
admin page fully restrictive
Merge pull request #3 from gemfarmer/admin-restrictions

Admin restrictions