fake login, toggle links based on login status, redirect to login except for index.html and login.html