limited admin functionality over users to only index and destroy