Edit profile page with password change fields

Possible improvements:
- Redirecting back to a page other than the referer
- Choosing layouts to match the calling site
Change to `OSU::AccessPolicy.action_allowed?`