restrict access to profile page