added user update profile screen, and restrictions so that users can only access their own data