cannot be accessed w/ a JWT token using an incorect secret
does not allowe access of other people's profile info