Refactore authentication tests
Refactor user view
Disallow signed in user to access new and create action
Add a test for 'friendly forwarding'
Prevent admin from destroying themselves