fix profile security