Make Gravatar link open in new window
Ensure admin attribute isn't PATCHable
Ensure 'Profile' and 'Settings' are for logged-ins
Dedupe login info in user edit and new views
Don't allow signed-ins to create new users
Prevent admins from deleting themselves