users should always be allowed to edit their own profile