hide 'manage users' from non-managers
is_manager should default to false and not allow null