securing route for profile