make login service a bit more robust; expose the user's profile.