header login link features parent frame URL - closes #170