only user can view own profile page; other users can only see products listed by that user when taken to user#show