-signed in users who visit new or create are redirected to home
-added test to check admin isn't editable through the web
-added friendly redirect to profile page after first unsuccessful login
-prevent user from deleting themselves (no test, requires controller test)