revert allow_destroy in User. Add some functionality for Edit - edit just the contact first name and last name for now