In your `find_profile` method, it looks like you aren't scoping this to the `current_user`. Can users edit each other's profiles?