fixed user authentication in profile