Further limiting admin user controller