fix auth/error/signout handlers