Fixed user listing authorization bug