Users can now update their username from their settings page

I'm a little nervous about removing :username from the attr_protected list, however I think it makes sense here. Let me know if there's a better way.

I also renamed signup.js to something that could be reused in edit user.