corrected userProfileController (working Spring Security)
Merge remote-tracking branch 'origin/offering_demo' into offering_demo