fix to request user's full profile in token body