handle login/signup/logout routes