more api stuff, profile controller