Remove JSON functionality across controllers.
finish user edit tests, move flash messages to application layout
add user edit/update tests
add 'friendly' redirect for protected areas
User REST actions, including admin