188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
You have to `return` something from the `render` function.