users are no longer staff by default (issue #99)