Add account profile for user, secure the url