Modify abilities to only allow admins to see user index