spec profile validation
ProfilesController#show, #create, #update
fix authentication routes