provide OAuth-like profile