espra/profile: implement the core login handler.