Ensure users can only view their own profile page
Rework admin-only permissions for viewing users#index