Made an integration test that fails in order to reproduce the bug:
"make sure admin users can act as a user who has never signed in before"
Thanks for your help, Chris!
Removed a block of code from the SessionsController that didn't allow
viewing of users that had never logged in production.