fix: sending non-owner users to 'error' page when trying to access user page