Test against admin mass assignment
Open gravatar edit link in a new window
Test to make sure Users/Profile/Settings/Signout links don't show up for unauthenticated users.
Refactor common fields between new user and edit user views
Add request info to debug dump info
Test that friendly forwarding only applies to the next login
Test that admins don't delete themselves