move userlist to admin domain, change templates. adjust security