Require user to be a staff or admin to get another users' profile.