add profile management and permissions stored in DB