add authentication helpers to stop unregistered users from accessing data, change all profile controllers to verify user identity