can view a friends profile
authorize user show page