security issue-->added django decorator

[thebrahma]

without the decorator any other third party can open the logged in user profile by just copying the URL of that particular user. want to learn more about django decorator : https://docs.djangoproject.com/en/2.0/topics/http/decorators/