accept profile changes via JSON post