ensure only logged out users see sign in prompt; fixes #92