show profile only when logged in