gateway: store authorized profile separate from oauth data