allowed user to sign out