added user authentication. profiles are only editable by the owner of the profile now