added profile endpoint, need http security to access community endpoint