logout and profile edit actions now assigned by signup service
simpler security APIs: eliminated Token tagging interface