Complete user destroy action, restrict to admins, create tests