created user profiles, limited access to profiles