Spec for securing admin
Refactoring user#edit and user#new