fixed sign in so the requests after adding the token dont 403 refs #43