Update IsAccountOwnerOrStaff permission.
Do not allow basic authentication.
Update xsrf defaults for Angular.
Add update and destroy functionality to profile settings page.