fished sign-in-out functionality