Move profile creation back to Login event, but only if the login is
allowed.