Fix up loopholes hopefully and add destroy action for themes
Only allow admins to view user list
Merge pull request #70 from travisvalentine/fix_loopholes

Fix loopholes