Add department check before create/update user