Edit profile page with password change fields

Possible improvements:
- Redirecting back to a page other than the referer
- Choosing layouts to match the calling site
Is it here that you should also check that the `requestor` owns the `identity`?  Even if the access policy is currently used only where we know that the requestor owns the identity, it might later be used in other places.