Fixed security on user profile page