Userprofile

1. I have added a second call to fetch the info i need for the profile page. I am wondering if this extra info shouldn't be returned from the auth call, because this breaks the current login test.

2. This profile page only works correctly when you log in as root. otherwise, it returns authorized.

3. should there be a separate endpoint to fetch and update the profile? I am currently using /users/
I think here maybe we should rather just store the full userProfile object. Then we won't need individual variables like:

```javascript
var username = null;
var passwordhash = null;
var firstname = null;
var surname = null;
var groups = null;
```

Also, we should catch if this call returns an error and if it does we should fail the login (`done(false)`). This will allow us to verify if the users password is correct. At the moment its allowing us to get past the login page even if the password is wrong, the api calls will still fail but we should prevent this from happening.