new style header-picture
fixed bug in authentication routine