rewrite: push login modal to the front page, don't allow anonymous
usage.