[add] nonce check for /signin, /signup, /withdraw, /my-account