Updates to profile and restricting access unless admin