api: profile login updated