substituted current_user method in a few places changed link_to profile ...

...to avoid login