show miniprofiler for authenticated requests, not just local