Restrict access to the new and create user actions