only admin now has access to browse users through url histvest/users/:id