disallow anonymous users to view user profile page

closes #55