user can see user list when logged in