restore shadowban functionality to mods

app/routes/users.py

@@ -448,12 +448,12 @@ def demod_user(user_id):
 
 @bp.post("/guest_user/<user_id>")
 @login_required
-@admin_only("topics.all_topics")
+@mod_only("topics.all_topics")
 def guest_user(user_id):
     target_user = Users.find({"id": user_id})
     if not target_user:
         return redirect(url_for('.all_topics'))
-    if target_user.is_mod():
+    if get_active_user().is_mod_only() and target_user.is_mod():
         return redirect(url_for('.page', username=target_user.username))
 
     target_user.update({