Added authorization spec tests
UsersController checks that users are signed in before 'edit' & 'update'
Tweaked tests to force a sign in when needed
'Edit' and 'update' actions now check for the correct user
Spec tests for users getting to the right page
Implemented 'Friendly forwarding' for protected pages