added logic and a test to ensure the admin attribute cannot be updated through the website
open the gravatar 'change' link in a new tab
added tests to check that the profile and settings links do not show up for a user that isn't signed in
removed duplicated form code by refactoring the new and edit views to use a partial and updated tests
completed exercise 6
added a test to make sure friendly forwarding only forwards to the given url the first time
modified the destroy action to prevent admins from deleting themselves