ProfileController auth filter