[JRO] Final touch-ups

* Push down some code from the view into the controller and model
* Wrap authorization around the topic listing
* rename the user viewing profile spec to correct name (I'm an idiot)
* Flesh out the user page object to support new work