188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
Turn the email address into an email link. You can look at `AdvisorProfileView` to see how it's done. Also, lowercase it.