fixed sign in, fixed user routes