Fixed an issue that allowed non admins to create manual payments
closes #43