Exercises/chapter 09

- Add some tests, move stuff to partial.
- Deny access to NEW and CREATE for signed in users.
- Make impossible for admin to delete own account.