If anyone types in "/index.php?option=com_userlist" after my web site address,  they can see my user list.  a pretty easy hack.  Is there some way to secure this for prying eyes?