Add current_user? method to verify user can only edit his own profile