finish sign in/out
fix user authentication