add is_private field to users table
hide private profiles