Update protecting the profile route

I think we should make sure a guest can't access the profile page.
It will throw an error because of the Auth::user()->username doesn't exists.