Actually use the profile's user not, the globally available user account.
Shield accounts helper from anonymous users.