now enforcing more security in the server. API supports delete of profiles and states. API will not allow saveing over state with new owner. API now requires credentials for saving state.