pub async fn update(
State(ctx): State<Arc<Context>>,
Extension(account): Extension<Account>,
Form(update): Form<ProfileUpdate>,
) -> Result<Redirect, Error> {
let _ = account
.update(&ctx.db, update.email, update.password)
.await
.map_err(|_| Error::database())?;

Ok(Redirect::to("/me/"))
}

I'm not sure why I was delaying this so much. Middleware take care of everything. By the time control reaches the handler, everything is neatly verified, and all I need to do is hit the database and redirect.