188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
Really easy way to implement this method:
```js
return this._user.school || {};
```