don't ask permission to write user's profile; that's stupid