Made Profiles Private, and corrected AJAX