Userprofile

1. I have added a second call to fetch the info i need for the profile page. I am wondering if this extra info shouldn't be returned from the auth call, because this breaks the current login test.

2. This profile page only works correctly when you log in as root. otherwise, it returns authorized.

3. should there be a separate endpoint to fetch and update the profile? I am currently using /users/
Here we could just set the entire userProfile object to null.