Restrict user listing and profile pages to administrators.