some exercises done
Create and New action are forbidden for signed ins
friendly forwarding and double sign_in
admin cannot destroy themselves