user can now view all loan requests. closes #25