set up that only logged in person can se their info

need to refactor