fixed server routes on profile and delete, added hmac on profile