require user to be logged in to view profile page