Testing that the  attribute is fobidden.
Arrange for the Gravatar 'change' link to open in a new window(or tab).
Add tests to make sure that 'Profile' and 'Settings' links don't appear when a user isn't signed in.
Use the sign_in test helper.
Remove the duplicated form code.
Redirect to root url when signed-in user access the new and create actions.
Add tests for forwarding to the default page after friendly forwarding.
Modify the destroy action to prevent admin users from destroying themselves.