Edit profile page with password change fields

Possible improvements:
- Redirecting back to a page other than the referer
- Choosing layouts to match the calling site
Does this get the errors out correctly? If confirmation doesn't match, does the `error` class get added to the form appropriately?  If not, might need `{scoped: :identity}` in the second argument here.