login required for profile form to ensure redirect