'My profile' form. Still lacks CSRF protection.