fixes for updating user profile and checking access