188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
PermissionDeniedView doesn't have any children, so you can just make a self-closing tag:
```
<PermissionDeniedView />
```