auth-token and profile persistence in db