Made user profile updates
1. Made user profile updates with pre-filled values. (Plaintext password in browser, probably need to be changed after dev ^ ^)
2. Moved user validating decorator from profile page to update page, since we want anyone to be able to see any profile.

We should do validation by the arguments passed and not url manipulation for DRY reasons, and so we don't accidentally allow an url like
.../<victim_user_id>/some garbage/<user_id_of_attacker>