def ban
    user = User.find params[:id]
    if logged_in_as(['admin', 'moderator'])
      user.ban
    else