set api version in api url
remove api urls for profiles and groups, and related view sets
implemented UserProfileSerializer, handles passwords as expected