Edit profile page with password change fields

Possible improvements:
- Redirecting back to a page other than the referer
- Choosing layouts to match the calling site
can be `lev_handler` so can pass options (e.g. `transaction:`); but ok as is too, just an FYI.