Add a test to be sure user admin attribute isn't accessible
Open gravatar 'change' link in a new window
Add tests to be sure session relative links aren't visible for non-signed users
Refactore authentication tests
Refactor user view
Disallow signed in user to access new and create action
Add a test for 'friendly forwarding'
Prevent admin from destroying themselves
Merge branch 'updating-users'