prevent potential malicious profile change due to django bug