hitting profiles.json publically displays only public stuff; if you're connected to a user, it shows that user's complete profile response