Use middleware to remove some redundant code.

add load_user.js. you cannot delete any profile other than your own!