added auth check before profile show