Tournament content is put behind authorization and controllers are refactored a bit.
Scrollbars are always enabled, to avoid jumping content.
Successful login routes to /tournament. Header has its own controller named HeaderCtrl.