Edit profile page with password change fields

Possible improvements:
- Redirecting back to a page other than the referer
- Choosing layouts to match the calling site
Not required, but one thing you could do is say:

    def setup
      @identity = caller.identity
    end 

and then use `@identity` instead of repeatedly calling `caller.identity` in `authorized?` and `handle`