fixed issue with creating new users
added more specific permissions
changed decorators