The users page now can ban and lift ban, add admin and remove admin.  The method to render the html does not deal with security.