Remove global whitelist for non-auth scaffold actions
Create 'Edit My Account' and disable scaffold User actions