Userprofile

1. I have added a second call to fetch the info i need for the profile page. I am wondering if this extra info shouldn't be returned from the auth call, because this breaks the current login test.

2. This profile page only works correctly when you log in as root. otherwise, it returns authorized.

3. should there be a separate endpoint to fetch and update the profile? I am currently using /users/
I think instead of returning this userProfile object here we should rather set it right in this function.