added sign out and fixed unauthenticated root access