fixed user sign-out function