access to profile & reset password page without authentication