fixed signout authenticity token