fixed route to allow user to sign out