more changes to support signing login/out requests