auth.html used in header login button