pulled user form fields out into partial
changed destroy action so admins cannot delete themselves