What if bLoadProfile is false because the given password doesn't match? You still return ACK even though the profile wasn't loaded because of an invalid password.