Updated edit profile controller and model to prevent setting of username and invalid timezone through possible POST request hacks