check if logged in before accessing routes
show sign_in only when not logged in