adds authorization/authentication/sign-out