Change challenge url to /sign-in, deal with empty profile.