test that delete http method is not allowed on profile api