work on profile-page, add confirmation endpoint + page