Update profile_controller.rb

add logged in acl check