move login-form and logged-in-controls to the head.php file; in the session, create an array to hold all the user data (makes unsetting all of it at once on logout much easier - also more flexible to hold additional user data later)