updated permissions RM #2007

This is not the end all, but at least people with manage can now do all
tasks. Only Admin is needed for UserController.
cleanup admin requirements

Only admin can see users.
Merge pull request #83 from PecanProject/RM-2007-update-permissions

redmine 2007 update permissions