fixed sign in and sign out routes