[FIX] param mismatch in identity modification (post-wip)

- closes 1243
- prevention of unauthorized attempt and message
- refactored html -> tpl
- vars -> wvars
- user interface ok -> Ok (since Cancel, not cancel)
- pep8