Fill out UsersController tests
Use a whitelist for edited user fields
Test UsersController->delete()