built authentication with sorcery so users can sign in/sign out