fixed sign in sign out and permission