Redirect non-admins who try to access admin URLs.  Fixes #8
Fix profile password fields.