Profile#_profile.html.erb: updated user ability checking