a logged in user can view their profile