fixed signed-in validations and redirects