allow logged in user to see other user timelines