Fix bug where I (as an admin) would inadvertently impersonate someone's account, because hovering over the "Impersonate" button would pre-fetch it, because it was a link (GET) instead of a button (POST) #wip