add userprotect module so webmasters can administer users