protect admin views that create users