development: shSecurity has signed-in and signed-out route handling