only show profile link when logged in. closes #12