Allow user to edit profile

`current_user.to_param == params[:id]` might be just a little neater.