working on profile authorization api