specs not passing, but refactor of profile / members fetch into auth module, pass into controllers