fixed unsecure user profile url for 4 api's