add dropdown for auth user
fix current_user check in header, add notice for logging out