Rename param, clean code.
Use model get_user and is_admin with check argument. Fix unauthorized responses.
Refactor forms, update translation.