modify route path for user to be profile, but keep using user controller
implement tests for user controller for PUT#update and DELETE #destroy