Change to ForbiddenException when trying to remove the last admin
Fix existing tests that failed due to removing the last admin, and implement new test case.