Fixed profiles page to require staff member credentials