users#profile

`GET http://localhost:3000/api/users/profile?token=4ebbcf2...`
closes #9