override CMFCore's setSecurityProfile to fix a getUserName/getUserId bug