changing from now() to utcnow() to correct sign-in/out times