create either normal or admin users. ensure that only admin users can create other users