test avatar_url method for user

write confirm_email tests

update Gemfile.lock

allow admins to change other user's avatars

deny equal start and finish times

make expires_at required on tokens table

document new env vars

Merge branch 'issue-22_change-user-verified-to-a-bool'

merge #16 (issue #2) into master