Write spec to verify that admin status of user cannot be changed via direct PATCH request.
Make Gravatar image "change" link open in new browser tab.
Specs to verify that "Users", "Signout" and other such links are not visible when user not sign in, or after invalid signin attempt.
Used _fields.html.erb partial to factor out duplicated code in User "edit" and "new" views.
Arrange for signed-in users to be redirected to root URL if they try to
access User "new" or "create" actions.
Add further debug info. to application layout, using "request" object.
Test that friendly forwarding only forwards to the given URL the first time.
Prevent users from deleting themselves.