FIX: moderators had no access to admin user page