sign out link only if user signed in