- Fixes /profile/forgot-password access for anons - UserProfileController @PreAuthorizes all method access