Fix small auth bugs

Signup is no longer hidden behind a route that needs authorization