/users endpoint can now only be accessed if the user is logged in and has a role of admin.