restrict profile page to authenticated users only.