Add some security - users only allowed to see and edit thier own profile

Three nothing Sox!