added tests thats the admin attribute is forbidden and a partial for signup fields