tested manually: login, profile view, profile updating, all working