more attributes to permit
fix infinite redirect error on signin/signup
some changes