Allow non-user admin to get user list

Currently, `department_officer` cannot call this:

`GET /users`

We need to list other admin users to mention or assign an issue to them.
Any permission-related login will be handled on frontend.