header is invisible if the user is not authenticated