Added 403 access denied page to controller.
Also added an option to fail silently when user doesn't have ACL perms to access the page.
Fixed routing issue with account password change.