authorize the app and show user profile