Properly sign profile-based requests