Security Loopholes Rectified

Closed all loopholes where a non-administrator can access to admin pages
and set acl permission to all pages. Also made the select option for
users/add dynamic so when a admin adds a new group the users/add select
box will update automatically.