Finish Chapter 9 exercises

- Verify that :admin is not PATCHable
- Open the Gravatar change link in new page
- Verify that Profile and Settings links only appear for logged in users
- Refactor the form code for users#new and users#edit
- Signed in users get redirected to root when accessing users#new and users#create
- Admins are no longer able to DELETE themselves