Fix security issue when user edits profile