On the way to only enabling admins to create users