Fix permissions in update_profile_fields