re-written user/show view, to make it more dynamic (erb); fixed the bug allowing to edit someone else's profile