profile authorization, not yet implemented
refactor profile page
refactor user profile page
refactor