Login moved to header (at last)