delete User#new
add access control for #edit#delete#send_mail#show