All of this is hackish stuff to get it so that someone can edit their own email and password.  it definitely needs to be done more elegantly.  eg, could make sense to have this return false and then override in the right/account module...

yes, it will match Gerry+*account+anything, but it's only called from a few places, like +*password, +*email.

Left and right ids might work (so long as we don't need this on new cards before those are assigned.  not sure). 

is_current_account is probably better, yes.