adds atomic profile update function

Yes, I added request because I don't know the old-school http-only way of sending a POST with a JSON body :-P
I don't htink this will work, will it?  I think `WHITELISTED` needs to be in the function.