Made current_user_profile security explicit