Finish user edit, update, index and destroy actions
verify admin cannot be 'patched'
gravatar link opens in a new window
common links not shown to unauthed users
signed in users cannot get #new or #create for users_controller