follow and collaborate capabilities

also added security in the profile.php