Make user management possible only to admins