updated users' edit view. Now users can change password. Used to check that other users could not Modify another's account; they cannot
fixed issue permission issues on viewing user profiles. Only the correct user and the admin can view a profile now. Flash messages now issue upon illegal actions