add session check for profile page