URL to editing profile contain user ID

[kbeker]

Currently during editing profile we can change edited profile to any other which already is created in database. ID should be handled from request body instead of URL.

Current state:

http://sheetstorm.codepoets.it/user/profile/1

Recommended state:

http://sheetstorm.codepoets.it/user/profile

[rwrzesien]

Similar question to this in #183 (comment) - who exactly should be able to edit users? If only user himself, we can avoid having ID in url and get it from request. Otherwise (if manager or admin can edit too) we have to pass it somehow, so then it should stay.

[Karrp]

Also admin should be able to edit users.

[rwrzesien]

Also admin should be able to edit users.

For this we have two separate views, so we can remove id from the one when user is editing his own profile, and for the admin editing user we can't before of reasons explained here: #183 (comment). But if while working on this I will find out that those two views can be easily combined and access can be secured on the view level, I would still insist on keeping the ID in the combined url/view.

[Karrp]

OK
Do what you think it should be good.