add new routes for signing in and out