api: fix signup route exclusion