Upgrade app from Rails 3.2 to 4.0, change to strong parameters, change to encrypted remember tokens, implement create and update action/view for updating user profile
Add authorization code for User#edit and User#update action which tests if user is signed in and also if the user is trying to edit the account of someone else.
Add user index, add creation of sample users with rake task db:populate, add pagination.
Implement endless page through jQuery.ajax
Add admin attribute to User model, implement destroy action for admins to delete users, implement appropriate tests for making sure the destroy actions works only for users