add profiles endpoint to manage user rights in the front