* fix(auth): show "account already exists" on duplicate email signup * fix(auth): use exact path match for duplicate-email signup check