User sessioning working; users can only CRU their own profiles; Deletion reserved for admin