add login_required to prevent errors
fix silly error
fix profile overrides (#720), redirect listing