Users are now restricted from seeing employee show pages.

The only profiles they are able to see now are ones that are public and with the correct affiliations.
This fixes DIR-135