removed redirect loop, added signout link