let signing page still work while keeping logged out users entirely out