Added test to ensure :admin is not accessible.
Gravatar change link will now open in a new tab/window.
Added test to ensure non-logged-in users don't see Users, Profile, or Settings links.
Refactored new/edit user into a shared _fields partial and fixed tests.
New users may only be created by non-signed-in users.
Added test to ensure redirects on sign-in only happen once.
Added guard against admins deleting themselves and appropriate tests.