prevent user from viewing another user page