Strip the validation out of the profile page, and run it all off the login page, just redirect back in before it would otherwise make you reauth.