added user management for staff