logged in users can see a list of all users