Change to handle user profile path more secure