fix(security): Wrong user when viewing profile