Edit Profile Form

get/create session
if ('username' param in session exists) {
   get form params
   if (there's no 'username' param in the form) {
      display an Edit Profile Form for the user who's logged in
   }
   else if ((there's a 'username' param in the form) AND ('usertype' param in the session == 'm')) {
      display an Edit Profile Form for 'username' in the form
   }
   else {
      display an error message
   }
}
else {
   error message to say user must logged in
}