#256469: always disallow editing/deleting uid1 (except when edited by self); removed 'authenticated user' from permissions and checks, since it's implicit

cleaned up to follow coding standards (#319082), restricted deleting from admin/user/user page (#270852)