change status code
render 401 when user is not authenticated
unsuccessful response
profile for authenticated user