allow 'admin' users to view the profile data of others

this also introduces the 'admin' fixture