require login to edit profile
refactor require login to edit
only allow users to edit own profile
friendly forwarding