Add test that user admin is not mass accessbile
Edit gravatar opens in new window
Test that private pages do not appear when not signed in
Refactor duplication in new and edit user forms into fields partial
Signed in users cannot access new or create for users
Admin cannot delete self
Complete REST actions for Users