Ensure root.

- request.script_root can be undefined.
Hook the navbar and permit listing together.
Slightly cleaned up the site root rendering.

- The redirect should be configurable.
- Remove this dumb test that does nothing of substance.
Login redirection links

- Login links on the 401 response page will persist the path through,
  and the login page will then redirect to that target.