force login for profile pages