turn off registration; add admin flag
add user edit
security for user area