added user profile page
added security constraints on user profile functionality