Add 'target=_blank' attribute to gravatar change link, prevent access of signed-in users to users#new and users#create actions, change friendly forwarding to only forward to given URL the first time, change 'admin_user' method in order to prevent admin users from destroying themselves