protected user profiles

protected user profiles works now