only allow valid user profiles

Merge branch 'feature/user-initial-creation'