Admin page for managing users

#2 #41
access via /user/list