Implement access control on the moderation pages

It seems like the administrative pages /manage/moderation and /manage/users/ is accessible for regular users, which might leak important data. We should fix this by adding some better access control.