separate validateClientIdentifier from fetchClientIdentifier, add validateProfile