finished log-in system

Also implemented partial log-in restriction to header, log out only
appears when logged in