can view (but not contact) profile when not logged in
fixes #30