Userprofile

1. I have added a second call to fetch the info i need for the profile page. I am wondering if this extra info shouldn't be returned from the auth call, because this breaks the current login test.

2. This profile page only works correctly when you log in as root. otherwise, it returns authorized.

3. should there be a separate endpoint to fetch and update the profile? I am currently using /users/
The `/authenticate` API actually returns an object that looks like this:

```json
{
    ts: "<a timestamp>",
    salt: "<the salt>"
}
```