Lock down users in admin console

* Closes #122