Changed so that only staff can add users to accounts