TL-110

Disable the password fields if the account doesn't allow admins
to change password.
TL-176

Add .json to the files URL when done via Ajax
this way the browser doesn't think is the same URL
as the normal HTML page and caches the JSON payload
as the actual page.