add new concept : authentication are cancellable, means credentials=null -> profile=null