added 'profile' page
added half finished 'items' to experiment with CORS requests
seems to be working, need cleanup