remove ability to create users from patron ability

resolves #823, for master