* Added login status and login/logout buttons
* (re-)complexified the user permission for reviewing
* SQL bufix, joining tables rather than selecting from two