only allow Admin users to edit/delete
only allow Admin users to create users
login current_user after creating another user