added authenticate_profile! callback, fixed <%=yield %>