changed userProfile call to use https