out: slightly improve logging
auth: assume less in SignIn
out: catch more template render errors
out: move reroute cookie to root