allow admins to rename user accounts
return a 403 instead of redirecting
fix tests
Merge pull request #2712 from gratipay/allow-admins-to-rename

Allow admins to rename user accounts