permit nest params in ProfileController
todo json response for ProfilesController