signout no longer requires delete request