refactor to use form_tag, spec helper
authorization
Add all users view
delete users