Added test - Admin attribute not accessible
Added tests for links not existing when signin fails
Blocked access to new and create actions in users controller unless signed out
Disallowed admin destroying themselves
Notes in Auth spec