Edit profile page with password change fields

Possible improvements:
- Redirecting back to a page other than the referer
- Choosing layouts to match the calling site
This is not a critical thing to fix, but does `:index` here mean "search"?  If so, I'd like to vote that we start calling that action "search" -- would make this clearer.  Just reading it it looks like any non-temp user can list all users (index), which is not (exactly) what is really happening.