diff --git a/packages/api/package.json b/packages/api/package.json
index 6e493809a..e725418d5 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -1,6 +1,6 @@
 {
   "name": "api",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "scripts": {
     "prebuild": "rimraf dist",
     "build": "nest build",
diff --git a/packages/api/src/main.ts b/packages/api/src/main.ts
index aa55c489e..c27466f9a 100644
--- a/packages/api/src/main.ts
+++ b/packages/api/src/main.ts
@@ -5,12 +5,18 @@ import { AppModule } from "./app.module";
 import { DBInstance } from "./db";
 import { environment } from "./environment";
 import { version } from "../package.json";
+import { json, urlencoded } from "express";
 
 async function bootstrap() {
   // DB Bootstrap (could be managed outside repo)
   await new DBInstance().setup();
   // API Bootstrap (auto connects to DB)
   const app = await NestFactory.create(AppModule);
+
+  // Configure body parser with increased payload size limits
+  app.use(json({ limit: "2mb" }));
+  app.use(urlencoded({ extended: true, limit: "2mb" }));
+
   app.enableCors();
   // Make available on reverse proxy path (e.g. /api)
   // app.setGlobalPrefix(environment.API_BASE_PATH || "");
diff --git a/packages/server/docker/docker-compose.yml b/packages/server/docker/docker-compose.yml
index b6799c18f..3ef3b9ad8 100644
--- a/packages/server/docker/docker-compose.yml
+++ b/packages/server/docker/docker-compose.yml
@@ -46,7 +46,7 @@ services:
     #   context: ../../api
     #   dockerfile: Dockerfile
     #   target: prod-env
-    image: idems/apps-api:1.6.0
+    image: idems/apps-api:1.6.1
     env_file:
       - ../../api/.env
     environment:
diff --git a/src/app/shared/services/auth/auth.service.ts b/src/app/shared/services/auth/auth.service.ts
index 74451914b..a63deba0d 100644
--- a/src/app/shared/services/auth/auth.service.ts
+++ b/src/app/shared/services/auth/auth.service.ts
@@ -90,7 +90,7 @@ export class AuthService extends AsyncServiceBase {
     const currentUserId = this.localStorageService.getProtected("APP_USER_ID");
     const restoreProfiles = authEntries
       .filter((v) => v.app_user_id !== currentUserId)
-      .sort((a, b) => (a.updatedAt > b.createdAt ? -1 : 1));
+      .sort((a, b) => (a.updatedAt > b.updatedAt ? -1 : 1));
     this.restoreProfiles.set(restoreProfiles);
   }