only allow Managers access to Requirements/Create