authentication working, except for profile rendering