Added REST ability to view users only for admins