block action create and new for signed in users
admin users should not destroy themselves
open gravatar settings in new tab
test delete link in users#index action only for admins