only allow users to edit their own profile. show public profile otherwise