non-registered users can not see the user list