admin can't delete himself
minor refactoring
signed in users can't access new and create
test friendly forwarding