profile page requires a user to be logged in