Implement user#edit with accompanying view & tests
Implement user#update
Require signin for accessing user#update and user#edit
Require correct user for accessing user#update and user#edit
Implement friendly forwarding when non-signed in user tries to visit protected page