rm profile api, now hosted with CORS by CTSI