have sign-in working; next is sign-out