viewing someone elses profile method works for logged-out users