fix routes to handle signin, signout paths