user login action requires ssl. also cleaned up admin navigation