Added admin security for /user directory and profile now updates the user in the db