Open change gravatar in new tab

add spec to ensure admin can't be edited
Ensure nav links only present when signed in